Bump nhs-england-tools/trivy-action from 1.4.0 to 1.5.0

Bumps [nhs-england-tools/trivy-action](https://github.com/nhs-england-tools/trivy-action) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/nhs-england-tools/trivy-action/releases)
- [Commits](nhs-england-tools/trivy-action@3456c16...289984b)

---
updated-dependencies:
- dependency-name: nhs-england-tools/trivy-action
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/preview-env.yml

@@ -507,20 +507,20 @@ jobs:
       # ---------- Security scanning ----------
       - name: Trivy IaC scan
         if: github.event.action != 'closed'
-        uses: nhs-england-tools/trivy-action/iac-scan@3456c1657a37d500027fd782e6b08911725392da
+        uses: nhs-england-tools/trivy-action/iac-scan@289984b2f03034233a347d6dbadecd5ca9ea9634
         with:
           scan-ref: infrastructure/environments/preview
           artifact-name: trivy-iac-scan-${{ steps.meta.outputs.branch_name }}
 
       - name: Trivy filesystem scan
         if: github.event.action != 'closed'
-        uses: nhs-england-tools/trivy-action/image-scan@3456c1657a37d500027fd782e6b08911725392da
+        uses: nhs-england-tools/trivy-action/image-scan@289984b2f03034233a347d6dbadecd5ca9ea9634
         with:
           image-ref: ${{steps.meta.outputs.ecr_url}}:${{steps.meta.outputs.branch_name}}
           artifact-name: trivy-scan-${{ steps.meta.outputs.branch_name }}
 
       - name: Generate SBOM
-        uses: nhs-england-tools/trivy-action/sbom-scan@3456c1657a37d500027fd782e6b08911725392da
+        uses: nhs-england-tools/trivy-action/sbom-scan@289984b2f03034233a347d6dbadecd5ca9ea9634
         if: github.event.action != 'closed'
         with:
           image-ref: ${{steps.meta.outputs.ecr_url}}:${{steps.meta.outputs.branch_name}}